KDDI Discloses Data Breach Affecting More Than 12 Million People After ISP Email Platform Attack – Thailand Computer Emergency Response Team (ThaiCERT)

Threat Intelligence Brief

Threat Risk: High

Victim: KDDI and affiliated Japanese ISPs

Incident: Data breach via exploitation of a zero-day vulnerability in a third-party email platform.

Impact: Exposure of approximately 12.2 million email addresses and 7.6 million passwords.

Attacker: Unidentified threat actors

Analysis: The key concern for KDDI and affiliated Japanese ISPs is the potential follow-on impact — Exposure of approximately 12.2 million email addresses and 7.6 million passwords. Treat this as a high-priority item and validate the source details, exposure scope, and required defensive actions. Attribution is not yet specific, so defenders should validate exposure before assuming actor intent.

Recommendations:

• Apply vendor patches Review exposed systems Monitor for exploitation indicators

Source: thaicert.or.th

View Original Source